NYC

trade

Warn

Audited by Snyk on Feb 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed to execute cryptocurrency trades: it provides a dedicated "trade" command to swap tokens on the Base network via a Swap API, requires wallet authentication, accepts token addresses and amounts, supports slippage and JSON output, and references transaction-level errors (e.g., TRANSFER_FROM_FAILED). This is a specific crypto/blockchain execution capability (signing/sending on-chain swap transactions), so it grants direct financial execution authority.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 10:20 PM